{"id":"CVE-2026-112110","title":"Privileged file deletion in SafeNet Authentication Client SACSrv","summary":"A time-of-check to time-of-use race condition in the SafeNet Authentication Client (SAC) SACSrv log-cleanup function can allow an authenticated, non-administrator local user to redirect a privileged file deletion operation outside the in…","severity":"medium","cvss":5.8,"cvssVector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N","cvssSource":"cna","cwe":["CWE-59","CWE-367"],"vendor":"Thalesgroup","product":"Safenet Authentication Client Service","affected":["safenet_authentication_client_service <= 10.9.7449"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-05T20:10:34.597050Z"},"published":"2026-11-05","updated":"2026-11-05","sourceUpdated":"2026-11-05T20:10:51.548Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-112110","references":[{"url":"https://supportportal.thalesgroup.com/csm?id=kb_article_view&sys_kb_id=ab05ca862b505350cdc1f87df291bfce&sysparm_article=KB0031249"}],"tags":["cve.org"],"ingestedAt":"2026-11-05T22:38:31.729Z","epss":0.00105,"epssPercentile":0.01077,"slug":"CVE-2026-112110","body":"## Overview\n\nA time-of-check to time-of-use race condition in the SafeNet Authentication Client (SAC) SACSrv log-cleanup function can allow an authenticated, non-administrator local user to redirect a privileged file deletion operation outside the intended log\ndirectory. \n\n\n\nThis issue affects SAC releases up to and including 10.9 R3 GA (build 10.9.7449).\n\n## Affected\n\n- `safenet_authentication_client_service <= 10.9.7449`\n\n## Remediation\n\nUpgrade to SafeNet Authentication Client 10.9 R3 Post GA (build 10.9.7954) or later.","depth":"sunlit","depthScore":32,"depthScoreParts":{"impact":31.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}